Package "php-pear"

Name: php-pear


PEAR Base System

Latest version: 1:1.10.9+submodules+notgz-1.1ubuntu1.1
Release: hirsute (21.04)
Level: security
Repository: main
Homepage: https://pear.php.net/package/PEAR


Download "php-pear"

Other versions of "php-pear" in Hirsute

Repository Area Version
base main 1:1.10.9+submodules+notgz-1.1ubuntu1
updates main 1:1.10.9+submodules+notgz-1.1ubuntu1.1


Version: 1:1.10.9+submodules+notgz-1.1ubuntu1.1 2021-07-29 17:06:23 UTC

  php-pear (1:1.10.9+submodules+notgz-1.1ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: incorrect symlink extraction
    - debian/patches/CVE-2021-32610.patch: properly fix symbolic link path
      traversal in submodules/Archive_Tar/Archive/Tar.php.
    - CVE-2021-32610

 -- Marc Deslauriers <email address hidden> Wed, 28 Jul 2021 10:47:32 -0400

CVE-2021-32610 In Archive_Tar before 1.4.14, symlinks can refer to targets outside of ...

About   -   Send Feedback to @ubuntu_updates